Error: rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
File:                     wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft (raw, json)
Hash identifier:          3gDglXFx890Y2ji7dhgGRFMoNTZApHgvHmTgnktOP5w=
Subject key identifier:   83:00:07:E6:70:FA:13:20:92:1C:0F:09:8B:BA:51:68:BB:91:4C:E3
Authority key identifier: C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27
Certificate issuer:       /CN=F366553AAF/serialNumber=C07079E5175605888D9BE4767F7C2BFD9714E027
Certificate serial:       0AE6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
Manifest number:          0AE0
Signing time:             Mon 12 Oct 2026 01:19:45 +0000
Manifest this update:     Mon 12 Oct 2026 01:19:44 +0000
Manifest next update:     Wed 14 Oct 2026 01:19:44 +0000
Files and hashes:         1: wHB55RdWBYiNm-R2f3wr_ZcU4Cc.crl (hash: u9LwYzQ0mxwdeqEM1uPZd0UFJ7QyW1V1S+viipc/v+4=)
                          2: 2A9617F866B411EFA2140445762E951A.roa (hash: aNfthBucjZ9+psYAUe+uWNPR/qRQFUARcMPznxavRTY=)
                          3: 6C3012C266AA11EF8E812E87762E951A.roa (hash: n7zkATB1H4RlSuKLcrCB/Jgsgt6yqHll4YIJhTQe0fI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 01:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2790 (0xae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366553AAF, serialNumber=C07079E5175605888D9BE4767F7C2BFD9714E027
        Validity
            Not Before: Oct 12 01:19:44 2026 GMT
            Not After : Oct 14 01:19:44 2026 GMT
        Subject: CN=6acc35b1-a071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:4e:d5:f0:5d:f4:cd:5b:e9:2c:4f:f7:31:
                    ca:d1:7b:a9:4d:fe:e8:39:aa:73:9f:48:6b:c6:0e:
                    0e:c0:ca:87:1d:27:e3:82:15:c4:be:da:58:5f:c7:
                    21:33:50:e7:cd:10:ad:6e:f6:ad:39:e5:fd:3f:32:
                    8c:d1:98:70:bc:e4:5a:ef:d4:8b:a1:15:4f:ac:cf:
                    6e:28:6e:e9:bd:8d:ed:cf:3a:3a:6c:ae:8e:b4:6c:
                    7e:d8:e6:0a:0a:d3:26:4a:64:c7:27:e9:95:ec:4f:
                    ce:d4:c4:e2:ce:af:98:40:55:7e:8b:91:ca:f8:30:
                    71:f2:e9:76:83:99:6c:51:be:31:e2:04:b4:f3:7d:
                    a4:10:d4:4c:f3:0e:5c:24:e4:2c:7e:4d:b0:70:d8:
                    9b:11:45:64:0b:56:e8:7b:cf:54:18:8e:5f:f0:e8:
                    54:bc:d1:41:59:e2:71:32:da:45:ec:99:41:9c:b8:
                    7c:84:85:9d:d0:3b:ae:f1:90:c5:0f:ce:d9:41:6d:
                    16:39:6b:7c:90:8e:ed:b2:7b:3c:e2:cf:6f:95:23:
                    5c:f0:9f:c5:86:31:3b:c9:df:16:09:f3:52:05:4c:
                    14:f4:7c:29:58:dd:eb:6b:c9:25:25:8d:36:35:9a:
                    4b:ae:49:03:46:c0:ef:7f:e1:1f:8d:f1:c6:c4:c5:
                    9b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:00:07:E6:70:FA:13:20:92:1C:0F:09:8B:BA:51:68:BB:91:4C:E3
            X509v3 Authority Key Identifier:
                keyid:C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:be:27:fd:19:f8:14:5e:92:21:1c:c5:4a:61:0e:8d:e8:
         a6:8d:e1:4d:69:ec:d1:4e:f6:1d:46:cc:1f:b0:e2:63:d2:c2:
         d4:5c:4e:48:a1:ad:fe:56:54:00:3a:10:8b:74:f7:e0:9d:ca:
         b5:e0:59:2d:a8:f6:8f:40:4a:fc:bb:28:42:58:a3:26:c9:ac:
         e2:07:fb:4f:a6:f9:48:1d:be:d7:fc:3d:69:86:93:5b:27:16:
         49:90:d0:74:fb:ab:f6:b5:8c:01:2c:ea:1a:c3:0d:ee:22:43:
         ff:6f:ec:c6:fb:43:30:ad:7e:95:53:27:c8:23:bf:d4:da:22:
         aa:3c:df:66:f5:4b:62:a6:b2:95:33:90:20:9f:2e:fd:e9:f9:
         fa:79:1b:1a:5c:15:b5:0a:0d:46:33:3f:6d:e3:4c:e7:bc:75:
         15:8f:7c:27:8c:5c:51:91:e2:b7:ca:9d:12:9f:c6:e1:3b:6b:
         4b:d9:05:dc:32:7f:87:ee:bb:c1:bd:65:0c:6c:3e:2c:3a:f4:
         6f:b3:bf:41:f5:d0:17:08:fe:01:93:5f:19:6f:e8:a6:e3:09:
         c7:04:4e:13:ff:d6:d9:19:c2:d2:eb:e7:bb:e0:21:2a:6a:ad:
         9d:79:a4:ee:16:90:6d:fd:af:c2:82:bd:e9:4e:7b:61:3a:e0:
         dc:6f:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:45:30 2026 by rpki-client